ThreatVectr
Tag

#espionage

35 stories taggedespionage.

Multiple computer monitors displaying cascading code and exploit payloads, with Windows logos and Chrome browser icons arranged across screens in a dimly lit op
Threat Intelligence

Four Spy Crews Fired the Same Chrome and Windows Exploit Kit in One Week

Researchers say a previously unseen toolkit called BlueMoon, first used by China-linked APT31, was shared across multiple espionage groups to break into browsers and take over Windows machines.

4 min read
A Windows desktop with a keyboard input tool interface in the background subtly transforming into a command-and-control dashboard, system access icons appearing
Threat Intelligence

China-linked hackers slipped a backdoor onto PCs through Sogou, a popular Chinese typing tool

Researchers tracking the cluster as UNC3569 say a single crafted link was enough to hand attackers full control of a victim's Windows machine.

3 min read
A computer server room with glowing neural network visualizations on displays, an open access panel revealing circuitry, and a shadowy figure's hand reaching to
Threat Intelligence

Spies and Criminals Are Stealing AI Systems, Not Just Data

Google's threat research team says nation-state hackers and extortion gangs are now going after the AI models, cloud accounts, and secret access keys that companies use to run artificial intelligence, turning those stolen assets into weapons for their own attacks.

4 min read
A hacker's workstation at night with multiple monitors displaying AI chat interfaces generating attack code, with maps of network vulnerabilities in real-time o
AI Security

AI Is Handing Anyone the Keys to Cyber Warfare. Companies Are Already Feeling It.

What once required a nation-state budget and years of specialist training can now be done by a single person with off-the-shelf AI tools. The evidence is no longer theoretical.

4 min read
A network operations center with multiple screens showing Cisco router interfaces, authentication logs scrolling rapidly, some entries marked as tampered or del
Threat Intelligence

China-Linked 'Fire Ant' Crew Breaks Into Cisco Routers to Steal Passwords and Hide Its Tracks

Sygnia says the espionage group has jumped from VMware servers to core network gear, tampering with logs and siphoning credentials from TACACS authentication servers.

4 min read
A research facility's interior showing server equipment and scientific instrumentation, with cybersecurity warning symbols or breach indicators subtly visible i
Vulnerabilities

Chinese-Speaking Hackers Hit Philippine Nuclear Research Agency Through ownCloud Bug

CISA has flagged a critical flaw in the file-sharing tool ownCloud as actively exploited, after attackers used it to steal data from a nuclear research body in the Philippines.

3 min read
A command-line terminal window displaying batch script code with Cyrillic character hints and European government email domains visible in logs, set against a d
Threat Intelligence

HOOKEDGE: A New Backdoor Aimed at European Government Networks, With Fingerprints Pointing to Russia

Recorded Future says a lightweight Windows batch script is being used against foreign ministries and government offices in Romania, Spain and Türkiye, with tentative links to the group tracked as APT28.

3 min read
An underground marketplace interface displayed on a darkened screen, listing reconnaissance services and proxy routing tools with pricing tiers, with law enforc
Threat Intelligence

FBI Pulls Plug on Chinese Espionage 'Quartermaster' That Rented Out Hacking Kit

A commercial-style service sold reconnaissance, proxy routing, and relay networks to China-linked spies targeting US critical infrastructure. Lumen's Black Lotus Labs spent a year mapping it.

4 min read
Formal graduation invitation cards arranged on a surface, with subtle digital artifacts or code elements emerging from the edges of the cards
Threat Intelligence

Fake Graduation Invites Hide China-Linked Spy Tool in Myanmar

Researchers at Seqrite Labs say Operation QUICSILVER is using booby-trapped invitations to plant a new Go-based backdoor called QUICAgent on government and IT networks.

3 min read
A darkened control room with multiple screens displaying network infrastructure and maps of South Asia, with indicators highlighting telecommunications faciliti
Threat Intelligence

Pakistan's Transparent Tribe Is Spying on Afghan Telecom Workers With Fresh Malware

A Pakistani hacking group has been quietly breaking into government and telecom targets in Afghanistan using two newly documented tools. India was in their sights too, but appears to have held the line.

4 min read
A modern office building exterior in Brisbane during daytime, with a laptop visible through a window displaying a fake website alongside legitimate business doc
Threat Intelligence

FBI Probe Into Chinese Espionage Front Ensnares a Small Brisbane Consultancy

A legitimate Australian firm called Horizzen found itself flooded with job applications meant for a fake version of its business. That fake site was one of 13 seized by the US Department of Justice as part of an alleged Chinese espionage operation.

3 min read
A Windows system registry editor window displayed on a monitor, with kernel-level entries highlighted in red, while a map in the background shows target regions
Threat Intelligence

Chinese Hacking Group Hides Backdoor Behind a Signed Windows Rootkit

Kaspersky researchers say the Mustang Panda crew paired an updated CoolClient backdoor with a kernel-level cloaking tool, striking targets in Myanmar and Pakistan.

4 min read
A split-screen composition with New Zealand national symbols and government buildings on one side, and Chinese embassy official statement text on a computer scr
Threat Intelligence

New Zealand's spy agency says China is spying 'at scale'. Beijing says that's a lie.

New Zealand's national intelligence service named China as the only country conducting large-scale espionage on its soil. China's embassy fired back, calling the report fabricated and blaming 'anti-China forces' for orchestrating the claims.

3 min read
A government building in Taipei visible through a window, while in the foreground a computer screen displays Taiwan's Ministry of Digital Affairs alert notifica
AI Security

Taiwan Says AI-Assisted Hackers Targeted Government Agencies in July

Taiwan's Ministry of Digital Affairs confirmed it detected an unusual wave of overseas cyber-attacks on government systems last month, with attackers using artificial intelligence tools in what officials called a reported first of its kind.

2 min read
A large satellite dish installation site on rural New Zealand farmland, with warning tape cordoning off the equipment and surveyors' instruments scattered nearb
Threat Intelligence

New Zealand's Spy Agency Says It Blocked a Chinese Observatory From Installing Satellite-Tracking Equipment on NZ Soil

Purple Mountain Observatory, a Chinese government-linked research body, tried to set up ground-based space hardware in New Zealand through a local company that apparently had no idea the gear could gather intelligence useful to Beijing's military.

4 min read
© 2026 Threat Vectr